The scale of the phishing attack on Hotmail could stretch further than first thought, with accounts on Google and Yahoo now threatened